UNCLASSIFIED

Merge branch 'jweatherford-development-patch-03293' into 'development'

Update hardening_manifest.yaml

See merge request !28
16 jobs for development in 25 minutes and 25 seconds (queued for 25 minutes and 7 seconds)
latest
Status Job ID Name Coverage
  .Pre
passed #3556211
ironbank
load scripts

00:00:12

 
  Preflight
passed #3556213
ironbank
folder structure

00:00:06

passed #3556214
ironbank
hardening_manifest

00:00:08

passed #3556212
ironbank
trufflehog

00:00:07

 
  Lint
passed #3556215
ironbank
wl compare lint

00:00:09

 
  Import Artifacts
passed #3556216
ironbank
import artifacts

00:00:40

 
  Scan Artifacts
passed #3556217
ironbank
clamav scan

00:03:01

 
  Build
passed #3556218
ironbank-isolated
build

00:02:55

 
  Scanning
passed #3556219
ironbank
anchore scan

00:12:40

passed #3556220
ironbank
openscap compliance

00:01:30

passed #3556221
ironbank
twistlock scan

00:01:40

 
  Csv Output
passed #3556222
ironbank
csv output

00:00:57

 
  Check Cves
failed #3556223
ironbank allowed to fail
check cves

00:01:02

 
  Documentation
passed #3556224
ironbank
documentation

00:01:19

 
  S3 Publish
passed #3556225
ironbank
upload to s3

00:01:58

 
  Vat
passed #3556226
ironbank
vat

00:00:17

 
Name Stage Failure
failed
check cves Check Cves
ERROR: anchore_cve                   CVE-2020-36289                jira-7.0.5                    /opt/atlassian/jira/atlassian-jira/WEB-INF/atlassian-bundled-plugins/jira-core-project-templates-7.0.5.jar    
ERROR: anchore_cve CVE-2020-36289 jira-7.0.5 /opt/atlassian/jira/atlassian-jira/WEB-INF/atlassian-bundled-plugins/project-templates-plugin-7.0.5.jar
ERROR: anchore_cve CVE-2020-36289 jira-8.0.0 /opt/atlassian/jira/atlassian-jira/WEB-INF/atlassian-bundled-plugins/jira-fileviewer-plugin-8.0.0.jar
ERROR: anchore_cve GHSA-7chv-rrw6-w6fc xstream-1.4.15 /opt/atlassian/jira/atlassian-jira/WEB-INF/atlassian-bundled-plugins/atlassian-gadgets-opensocial-plugin-6.0.3.jar:META-INF/lib/xstream-1.4.15.jar
ERROR: anchore_cve GHSA-7chv-rrw6-w6fc xstream-1.4.15 /opt/atlassian/jira/atlassian-jira/WEB-INF/application-installation/jira-software-application/jira-greenhopper-plugin-8.13.6.jar:xstream
ERROR: anchore_cve GHSA-7chv-rrw6-w6fc xstream-1.4.15 /opt/atlassian/jira/atlassian-jira/WEB-INF/atlassian-bundled-plugins/plugin-jira-1.31.9.jar:xstream
ERROR: anchore_cve GHSA-7chv-rrw6-w6fc xstream-1.4.15 /opt/atlassian/jira/atlassian-jira/WEB-INF/lib/xstream-1.4.15.jar
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1